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TN THE CLAIMS 

Claim 1. (Currently Amended) A method comprising the steps of: 

receiving a Session Initiation Protocol (SIP) message containing VPN information from 

an initiating application; and 

registering the VPN information frnm the SIP message on a communication network. 

Claim 2. (Original) The method of claim 1, wherein the commwiication network is a Multi- 
Protocol Label Switching (MPLS) network. 

Claim 3. (Original) The method of claim 1, wherein the step of registering uses Multi-Protocol 
Border Gateway Protocol (MP-BGP) to distribute routing information associated with the 
initiating application to the communication network. 

Claim 4. (Original) The method of claim 1, wherein the step of registering causes the 
communication network to establish network VPN tunnels. 

Claim 5. (Original) The method of claim 1, further comprising receiving a SIP message from an 
initiating application containing a request for network VPN resources. 

Claim 6. (Original) The method of claim 5, wherein the request for network VPN resources 
comprises VPN information including requested bandwidth, duration, and quality of service. 

Claim 7. (Original) The method of claim 5, further comprising signaling the request to the 
communication network. 

Claim 8. (Original) The method of claim 7, wherein signaling the request to the communication 
network comprises instructing the communication network to reserve network VPN resources on 
a network VPN tunnel according to the VPN information. 
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Claim 9. (Original) The method of claim 5, further comprising forwarding a SIP invite message 
toward a destination application. 

Claim 10. (Currently Amended) A comouter-rea dahl e medi um rnntaininp instructions for 
.filing at lea st nn. nrocessor to y *rfWmi a method of providing network VPN 

services on demand, the method c omprising the steps of: 

program logio configured to regkt* registerins application-VPN-ID information 
associated with a first application on a communication network; and 

program logio configured to intorfnea interfacing with the communication network to 
obtain network VPN resources associated with the application-VPN-ID information upon receipt 
of a request for access to the network VPN resources from the first application. 

Claim 11. (Currently Amended) The mefliod_seftwflfe of claim 10, further comprising toestep. 
ofjHofcram logio for maintaining a mapping between the first application and the network VPN 
resources provided to the first application. 

Claim 12. (Currently Amended) The method software of claim 10, further comprising the st ep, 
of receiving p rogram logic configured to rccoivo session initiation protocol (SIP) signaling from 
a SEP agent associated with the first application and to generate SIP signaling directed to a 
second application. 

Claim 13. (Original) A Service - Virtual Private Network (S-VPN) gateway, comprising: 

a Session Initiation Protocol (SIP) server configured to handle SIP signaling to enable a 
first application to register for network VPN resources using said SIP signaling. 

Claim 14. (Original) The S-VPN gateway of claim 13, wherein the SIP server is further 
configured to handle SIP signaling to enable the first application to request access to said 
network VPN services. 
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Claim 15. (Original) The S-VPN gateway of claim 14, further comprising a media signaling 
gateway configured to interface with at least one network device configured to participate in 
providing said network VPN services. 

Claim 16. (Original) The S-VPN gateway of claim 14, further comprising a services module 
configured to provide authentication, authorization, and accounting services on the 
communication network. 

Claim 17. (Original) The S-VPN gateway of claim 13, further comprising an application-VPN 
database configured to store information associating applications with network VPN resources 
on the communication network. 
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